What is KYC and how does it work?

Maciej Zieliński

13 Apr 2022
What is KYC and how does it work?

KYC, the “Know Your Customer” rule, is a common method of user verification in connection with the start of said users use of financial services. KYC is the norm in cryptocurrencies and financial law, as professionals are required to make every effort to verify the identity, relevance and risk of maintaining business relationships with the customer. These procedures are also a measure for AML analysis, which is taking action which aim to prevent money laundering. How does KYC work? In which countries must NFT projects implement the KYC procedure? What does it require of us? We're writing about this below.

How does KYC work?

KYC processes are also used by various economic operators to ensure that their customers, agents or consultants are checked before they are given access to any financial resources. The “Know Your Client” principle (KYC) is a mandatory requirement for entities which deal with securities, bank accounts, etc.

What is included in KYC

The purpose of the provisions set out by the KYC is to prevent criminals from using businesses for money laundering and commiting other financial crimes. By linking KYC and AML, many companies understand their customers better and have the opportunity to verify the capital and payments they receive. This helps them manage risk responsibly and professionally. In principle, institutions formulate their KYC policies on the basis of the following four key elements:

  • Customer Acceptance Policy
  • Customer Identification Procedures,
  • Monitoring of Transactions,
  • Risk Management.
AML

The financial law environment is quite rigorous and makes KYC a mandatory and key procedure for financial institutions and others, as KYC minimizes the risk of fraud by identifying suspicious information at the initial stage of account creation. The KYC policy defines a client as follows. A customer is:

  • the person or entity that holds the account or is in a business relationship with the reporting entity;
  • the person on whose behalf the account is held,
  • the beneficiary of transactions carried out by professional intermediaries, such as exchange brokers, auditors or legal advisers,
  • any person or entity associated with a financial transaction that may pose a significant reputational risk or other risk to a bank, i.e. a person performing a bank transfer or issuing a “trust” on a high-value request as a single transaction.

NFT and KYC

In NFT, KYC is an element that is dependent on a given country’s policies, but also on what type of NFT will be used. Each State decides on its own whether the creation of NFT requires implementation of KYC procedures. Below we present the most popular places in the world of cryptography, which we have systematized by legislation.

Dane, Bezpieczeństwo, Klawiatura, Komputer, Laptop

KYC and cryptocurrencies

Cryptocurrencies are seen as decentralized and anonymous funds. However, these benefits are also a challenge in preventing money laundering, as criminals see cryptocurrencies as an ideal means of using illegal capital. As a result, many financial institutions are looking for ways to impose KYC on cryptocurrency markets, requiring cryptocurrency platforms to verify their clients. Currently, most of the entities have implemented or are implementing KYC into their services. Exchanges are classified in accounting terms as “crypto-to-crypto” or “fiat-to-crypto”. As crypto-crypto exchanges do not deal with traditional currency, they do not feel the same pressure to apply KYC standards as stock exchanges which store traditional currency of any sort. If stock exchanges have a traditional currency in their offer, they are more pressured by states to implement the KYC rule. Countries which show great interest in NFT have already regulated this area. The United Arab Emirates, Estonia, Switzerland and the United Kingdom are places worth familiarizing yourself with if you want to start your NFT journey.

Dubai and NFT

At present, crypto assets in the United Arab Emirates have not been classified for their purpose, which could help to determine the law in this respect. Instead, the United Arab Emirates recognizes that it is necessary to specify how cryptocurrencies or NFT are actually used. For example, a crypto resource can be used as a token of use (in this case it will not be regulated as a financial product and it is probably not necessary to implement KYC), but with an awareness of its popularity it is considered to be traded for the purpose of making an investment. If, according to the country, the NFT is seen as a means of investment, it is an investment product, then it will be treated as a financial product, resulting in its regulation using the provisions regarding UAE securities (in this case, KYC needs to be implemented in the project). In Dubai and the United Arab Emirates, there is no single law which regulates NFT. Any use of NFT is analyzed in terms of its actual use. Although Abu Dhabi Global market (ADGM) as a free financial zone regulated the use of crypto assets as virtual assets, NFT does not fall within this definition. According to this law, “the virtual resource is not produced or guaranteed by any jurisdiction”. In summary, it should be pointed out that NFT is subject to KYC only if it is practically treated as an investment project. NFT is not subject to KYC if it is treated as a token of use only.

NFT and KYC in Estonia

Until 2020, it appeared that cryptocurrencies can enjoy freedom in Estonia in terms of legal regulation. This country has become the ideal place for businesses and business professionals who wanted to legally run a business based on blockchain technology and cryptocurrencies. The license issued by Estonia also provides the possibility to provide services throughout the EU. Do you need to obtain a license to implement your NFT project in Estonia? As a general rule, not until 2020! This was due to the fact that licenses were mandatory for virtual currency service providers. The law in this case describes virtual currencies as payment-based instruments such as Ether (ETH), Bitcoin (BTC), USDT and others.
According to case-law, the NFT did not cover the definition of virtual currencies, since each NFT provides a unique, limited or documented resource that allows for the use of specific items such as digital art. NFT is treated more as a property right, rather than a means of payment. That was the case in the past, but the 2020 amendment on the legislation
regarding anti-money laundering put all entities connected with NFT, ICO and decentralized exchanges into one group. Since then, KYC is a mandatory component in the implementation of NFT projects.

Switzerland – NFT are not securities

The situation in Switzerland is similar to that in the United Arab Emirates. When NFT is used as a means of payment and can be transferred or reinvested, the regulatory authority is required to implement KYC and AML procedures. If the NFT does not belong to the securities category and serves only as a guarantee of the “right of access” to the service or digital arts, there is no mandatory obligation to implement KYC and AML procedures. However, if the NFT can in any way be used as an investment, it is subject to the definition of securities.

Great Britain – mandatory compliance with KYC standards

In the UK, the procedural requirements determining whether the creation of a NFT project requires the implementation of the KYC and AML regulations were created by the RUSI (Royal United Services Institute), the UK's defense and security think tank. The institution itself was created in 1831 and is intended to ensure the security and efficient operation of the country’s finances. According to RUSI, NFT products:

  • help guarantee an ownership record of any item by means of a digital element,
  • give creators the ability to obtain royalties from copyrights,
  • are mainly purchased using cryptocurrencies.


Unfortunately, RUSI points to the risks associated with NFT, which it defines as follows:

  • NFT is purchased using cryptocurrencies, which are often used to commit financial crimes or for money laundering.
  • There is a risk of hacking attacks on accounts of users who own NFT.
  • As such, RUSI identifies NFT as a product that requires both KYC and AML procedures to be implemented and followed.

Summary

With KYC, we gain the ability to collect and analyze a lot of customer information. This helps protect them from financial crime and facilitates the exchange of information between companies and users. In addition, KYC is an aid to AML, as at an early stage it can identify an entity that is likely to be criminogenic. As countries are increasingly concerned about the bureaucracy and regulation of each sector, KYC is an element that everyone will need to familiarize themselves with sooner or later. Let us remember that NFT may have different applications, from collectors' products to gaming, or property rights to invest. Depending on their use, as well as the geographical and legislative elements, different provisions will apply. At the same time, we stress that it is useful to consult a professional legal adviser to help you comply with applicable laws before any actions connected with KYC, AML, or NFT are taken. This article does not constitute legal advice.

Most viewed


Never miss a story

Stay updated about Nextrope news as it happens.

You are subscribed

How NOT to Create a DAO: Common Pitfalls You Should Avoid

Kajetan Olas

27 Dec 2024
How NOT to Create a DAO: Common Pitfalls You Should Avoid

Decentralized Autonomous Organizations (DAOs) represent a fundamental shift in how communities, companies, and initiatives can coordinate efforts, funds, and decisions on the blockchain. By leveraging transparent smart contracts and on-chain governance mechanisms, DAOs aim to distribute authority, reduce overhead, and foster a more democratic decision-making process. However, building a successful DAO isn’t just about cutting-edge tech or grand ideas—it also requires a clear vision, well-crafted governance rules, and a strategically engaged community.

In this article, we’ll take a counterintuitive approach by highlighting how not to create a DAO. By focusing on common pitfalls—from legal oversights to governance missteps—we can better understand what truly contributes to a thriving, sustainable DAO. This perspective aligns with the importance of recognizing cognitive biases, such as insensitivity to base rates and the conjunction fallacy, which often lead enthusiastic founders to overlook real-world data and complexity. Avoiding these traps can be the difference between launching a resilient DAO and watching an ambitious project crumble under misaligned structures or unmet expectations.

2. Missing the Governance Threshold Mark

Governance Thresholds Gone Wrong

Governance thresholds dictate how many votes or what percentage of voting power is needed to pass a proposal within a DAO. Striking the right balance here is crucial. Thresholds that are set too high can stifle progress by making it nearly impossible for proposals to succeed, effectively discouraging member participation. On the other hand, thresholds that are too low can lead to frivolous proposals or constant voting spam, making governance more of a burden than a benefit.

When designing your DAO’s thresholds, consider:

  • Community size and engagement levels: Larger communities might handle higher thresholds more comfortably, while smaller groups may benefit from lower requirements to encourage active participation.
  • Type of proposals: Operational decisions may need a lower threshold, whereas critical changes (such as tokenomics or treasury management) often require more consensus.
  • Voter fatigue: The more frequently members are asked to vote—and if it’s too easy to put forward proposals—the greater the risk of apathy or disengagement.

Over-Complex vs. Over-Simplified Governance

It’s tempting to either pile on complicated governance rules or oversimplify them to keep decision-making quick. However, both extremes can be problematic. Simplicity in governance is key to enhancing clarity and participation. Overly complex smart contracts and procedural layers can dissuade newcomers from getting involved, while an oversimplified model might fail to address potential conflicts or security vulnerabilities.

Some issues to watch out for:

  • Complex Smart Contracts: More code means more potential bugs and greater difficulty in auditing or updating governance logic.
  • Opaque Voting Processes: If members can’t easily understand how votes are tallied or how proposals are introduced, engagement drops.
  • Excessive Centralization in “Simple” Models: In trying to streamline governance, some DAOs inadvertently concentrate power in the hands of a few decision-makers.

Ultimately, aiming for a balanced governance framework—one that is easy enough for members to participate in but comprehensive enough to protect the DAO from abuse—is central to avoiding the pitfalls of governance threshold mismanagement.

3. Underestimating Legal and Regulatory Aspects

Legal Wrappers and Compliance

Building a DAO without considering legal and regulatory frameworks is a common recipe for disaster. While decentralization is a powerful concept, it doesn’t absolve projects from potential liabilities and compliance obligations. Assigning your DAO a formal legal wrapper—whether it’s a foundation, a cooperative, an LLC, or another entity type—can help mitigate personal risks for contributors and align your organization with existing regulatory regimes.

Failing to think through these details often leads to:

  • Personal Liability for Founders: Without a proper legal entity, core contributors might become personally responsible for any legal disputes or financial mishaps involving the DAO.
  • Regulatory Crackdowns: Governing bodies worldwide are actively monitoring DAOs for compliance with securities laws, anti-money laundering (AML) regulations, and tax obligations. Ignoring these can lead to penalties, fines, or forced shutdowns.

Non-Existent or Inadequate Documentation

Equally problematic is the lack of clear documentation outlining the DAO’s legal structure and operational protocols. From voting procedures to treasury management, every aspect of the DAO’s lifecycle should be properly documented to reduce ambiguity and help new members understand their responsibilities. Inadequate documentation or outright neglect can create:

  • Confusion Over Roles and Responsibilities: Without explicit definitions, it’s easy for tasks to fall through the cracks or for disagreements to escalate.
  • Inability to Enforce Rules: DAOs rely on both smart contracts and social consensus. Formalizing rules in documentation helps ensure consistent enforcement and prevents unwelcome surprises.

In short, underestimating the legal dimension of DAO creation can derail even the most innovative projects. By proactively addressing legal and regulatory considerations—and maintaining thorough documentation—you not only protect core contributors but also fortify trust within your community and with external stakeholders.

Overlooking Community Building

The Importance of Community Engagement

A DAO, at its core, is nothing without an active and supportive community. Driving grassroots enthusiasm and participation is often the deciding factor between a thriving DAO and one that fizzles out. Yet, it’s surprisingly easy to underestimate just how vital it is to nurture community trust and engagement—especially during the early stages.

Some common pitfalls include:

  • Treating Community Members as Passive Observers
    Instead of viewing your community as a dynamic force, you might slip into a one-way communication style. This discourages members from taking initiative or contributing fresh ideas.
  • Lack of Clear Roles and Channels
    Without well-defined roles and open communication channels—like forums, Discord servers, or governance platforms—members can feel confused about where to participate or how to add value.
  • Ignoring Early Feedback
    In a DAO, the “wisdom of the crowd” can be a powerful asset. Overlooking or trivializing user feedback can lead to missed opportunities for innovation and improvement.

Failing to Incentivize Properly

Well-structured incentives lie at the heart of any successful DAO. Whether you’re offering governance tokens, staking rewards, or recognition badges, these incentives must be aligned with the DAO’s long-term goals. Misalignment often causes short-sighted behavior, where participants chase quick rewards rather than contributing meaningfully.

  • Overemphasis on Token Speculation
    If the primary draw for community members is the promise of quick token price gains, you risk attracting speculators instead of builders. This can lead to fleeting participation and sell-offs at the first sign of trouble.
  • Neglecting Non-Monetary Rewards
    Recognition, social standing, and meaningful collaboration can be just as powerful as financial incentives. When a DAO fails to provide pathways for skill development or leadership, member engagement wanes.
  • Cognitive Bias Traps
    Biases such as the conjunction fallacy can mislead founders into believing that if multiple positive outcomes are possible (e.g., rising token prices, active participation, mainstream adoption), then all those outcomes will inevitably happen together. This wishful thinking can blind DAOs to the need for thoughtful, data-driven incentive models.

To avoid these pitfalls, DAO creators must actively foster a culture of transparency, collaboration, and mutual respect. By setting clear expectations, leveraging diverse incentive structures, and consistently involving community feedback, you ensure members are motivated to contribute more than just their votes—they become co-creators in the DAO’s shared vision.

5. Ignoring Technical Considerations

Token Standards and Governance Frameworks

A solid technical foundation is essential when you create a DAO, particularly if it involves on-chain governance. Selecting the appropriate token standards and governance frameworks can significantly impact your DAO’s security, efficiency, and scalability.

Some pitfalls to watch out for include:

  • Choosing Incompatible Token Standards
    If your DAO relies on a token that isn’t easily integrated with governance contracts or lacks upgradeability, you might face roadblocks when implementing new features or patching vulnerabilities.
  • Underestimating Smart Contract Complexity
    Even “simple” governance tokens can hide complex logic behind the scenes. Overlooking these complexities may result in bugs, lockouts, or exploits that harm the DAO’s reputation and finances.
  • Ignoring Off-Chain vs. On-Chain Dynamics
    Governance strategies often combine on-chain decisions with off-chain discussions (e.g., using platforms like Discord or forums). Failing to synchronize these two spheres can fracture community engagement and hamper decision-making.

Poor Architecture and Security

Robust security isn’t just about preventing hacks—it's about building an architecture that can adapt to evolving threats and changing community needs.

Key oversights include:

  • Inadequate Auditing
    Smart contracts require thorough reviews, both automated and manual. Rushing to mainnet deployment without proper audits can lead to major losses—financial, reputational, or both.
  • No Contingency Plans
    If a vulnerability is discovered, how will you respond? Lacking emergency procedures or fallback governance mechanisms can leave a DAO paralyzed when critical decisions must be made quickly.
  • Over-Engineered Solutions
    While security is paramount, over-complicating the DAO’s architecture can create unintended vulnerabilities. Keeping your setup as simple as possible reduces attack surfaces and makes it easier for community members to understand and trust the system.

In short, technical considerations form the bedrock of a functional DAO. Choosing appropriate token standards, thoroughly auditing contracts, and designing for both present-day and future needs are non-negotiable steps in avoiding costly pitfalls.

Best Practices and Lessons

When studying successful DAOs, certain themes emerge time and again. According to Aragon the most robust DAOs share a commitment to simplicity, iteration, and transparent governance. Instead of rolling out overly sophisticated models from day one, they evolve and adapt based on community feedback and real-world performance.

Here are a few best practices worth emulating:

  • Iterative Approach to Governance
    Start small and build up. Launch a Minimal Viable DAO (MVD) to test voting processes, incentive mechanisms, and proposal management. Gather community feedback and refine before taking bigger steps.
  • Simple, Transparent Rules and Processes
    Ensure proposals are easy to understand and that the voting process is accessible to all token holders. Overly complicated frameworks can dissuade new members from participating.
  • Clear Roles and Shared Responsibilities
    Define contributor and community member roles early on. Whether you rely on working groups, committees, or elected leaders, clarity prevents power vacuums and fosters collaboration.
  • Open Communication and Education
    From Discord channels to public documentation, keep conversation and learning at the heart of your DAO. Encourage members to ask questions, propose improvements, and take leadership roles.

Academic Perspectives

Beyond practical experience, a growing body of research offers theoretical insights that can strengthen DAO governance. The discusses emerging patterns in DAOs, including how incentives and on-chain rules interact with off-chain social dynamics. By examining these findings, DAO creators can better anticipate challenges—like voter apathy, whale influence, or collusion—and integrate solutions from the outset.

Incorporating academic perspectives can help:

  • Validate Governance Assumptions
    Empirical data and rigorous analyses can confirm or challenge the assumptions behind your DAO’s architecture, preventing costly mistakes.
  • Stay Ahead of Regulatory and Social Shifts
    Academics often explore how upcoming policies or societal trends might impact DAOs, offering a forward-looking lens that day-to-day builders might miss.
  • Establish Credibility
    Aligning your DAO’s structure and operations with recognized research signals professionalism and thoroughness, potentially attracting more serious contributors, partners, and investors.

Conclusion

As you can see, creating a DAO involves more than just deploying a smart contract and distributing tokens. By examining these common pitfalls—from poor governance thresholds to inadequate legal structures, from neglecting community engagement to disregarding technical complexities—you gain a clearer picture of what not to do when you set out to create a DAO. Failing to address these areas often leads to compromised security, stalled decision-making, regulatory headaches, or outright community collapse

At Nextrope, we specialize in tailored blockchain and cryptocurrency solutions, including DAO creation and tokenomics design. If you’re looking to avoid these common pitfalls and build a thriving DAO that stands the test of time, feel free to contact us or explore more resources on our blog.

Quadratic Voting in Web3

Kajetan Olas

04 Dec 2024
Quadratic Voting in Web3

Decentralized systems are reshaping how we interact, conduct transactions, and govern online communities. As Web3 continues to advance, the necessity for effective and fair voting mechanisms becomes apparent. Traditional voting systems, such as the one-token-one-vote model, often fall short in capturing the intensity of individual preferences, which can result in centralization. Quadratic Voting (QV) addresses this challenge by enabling individuals to express not only their choices but also the strength of their preferences.

In QV, voters are allocated a budget of credits that they can spend to cast votes on various issues. The cost of casting multiple votes on a single issue increases quadratically, meaning that each additional vote costs more than the last. This system allows for a more precise expression of preferences, as individuals can invest more heavily in issues they care deeply about while conserving credits on matters of lesser importance.

Understanding Quadratic Voting

Quadratic Voting (QV) is a voting system designed to capture not only the choices of individuals but also the strength of their preferences. In most DAO voting mechanisms, each person typically has one vote per token, which limits the ability to express how strongly they feel about a particular matter. Furthermore, QV limits the power of whales and founding team who typically have large token allocations. These problems are adressed by making the cost of each additional vote increase quadratically.

In QV, each voter is given a budget of credits or tokens that they can spend to cast votes on various issues. The key principle is that the cost to cast n votes on a single issue is proportional to the square of n. This quadratic cost function ensures that while voters can express stronger preferences, doing so requires a disproportionately higher expenditure of their voting credits. This mechanism discourages voters from concentrating all their influence on a single issue unless they feel very strongly about it. In the context of DAOs, it means that large holders will have a hard-time pushing through with a proposal if they'll try to do it on their own.

Practical Example

Consider a voter who has been allocated 25 voting credits to spend on several proposals. The voter has varying degrees of interest in three proposals: Proposal A, Proposal B, and Proposal C.

  • Proposal A: High interest.
  • Proposal B: Moderate interest.
  • Proposal C: Low interest.

The voter might allocate their credits as follows:

Proposal A:

  • Votes cast: 3
  • Cost: 9 delegated tokens

Proposal B:

  • Votes cast: 2
  • Cost: 4 delegated tokens

Proposal C:

  • Votes cast: 1
  • Cost: 1 delegated token

Total delegated tokens: 14
Remaining tokens: 11

With the remaining tokens, the voter can choose to allocate additional votes to the proposals based on their preferences or save for future proposals. If they feel particularly strong about Proposal A, they might decide to cast one more vote:

Additional vote on Proposal A:

  • New total votes: 4
  • New cost: 16 delegated tokens
  • Additional cost: 16−9 = 7 delegated tokens

Updated total delegated tokens: 14+7 = 21

Updated remaining tokens: 25−21 = 425 - 21 = 4

This additional vote on Proposal A costs 7 credits, significantly more than the previous vote, illustrating how the quadratic cost discourages excessive influence on a single issue without strong conviction.

Benefits of Implementing Quadratic Voting

Key Characteristics of the Quadratic Cost Function

  • Marginal Cost Increases Linearly: The marginal cost of each additional vote increases linearly. The cost difference between casting n and n−1 votes is 2n−1.
  • Total Cost Increases Quadratically: The total cost to cast multiple votes rises steeply, discouraging voters from concentrating too many votes on a single issue without significant reason.
  • Promotes Egalitarian Voting: Small voters are encouraged to participate, because relatively they have a much higher impact.

Advantages Over Traditional Voting Systems

Quadratic Voting offers several benefits compared to traditional one-person-one-vote systems:

  • Captures Preference Intensity: By allowing voters to express how strongly they feel about an issue, QV leads to outcomes that better reflect the collective welfare.
  • Reduces Majority Domination: The quadratic cost makes it costly for majority groups to overpower minority interests on every issue.
  • Encourages Honest Voting: Voters are incentivized to allocate votes in proportion to their true preferences, reducing manipulation.

By understanding the foundation of Quadratic Voting, stakeholders in Web3 communities can appreciate how this system supports more representative governance.

Conclusion

Quadratic voting is a novel voting system that may be used within DAOs to foster decentralization. The key idea is to make the cost of voting on a certain issue increase quadratically. The leading player that makes use of this mechanism is Optimism. If you're pondering about the design of your DAO, we highly recommend taking a look at their research on quadratic funding.

If you're looking to create a robust governance model and go through institutional-grade testing please reach out to contact@nextrope.com. Our team is ready to help you with the token engineering process and ensure that your DAO will stand out as a beacon of innovation and resilience in the long term.